$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/baf2172c-4e81-3994-94ea-5cbfe380b1ce.roa File: baf2172c-4e81-3994-94ea-5cbfe380b1ce.roa (raw, json) Hash identifier: sbCdAji/YR4sjTezYEplxuS7jFjw6jd3JXwsds0mffs= Subject key identifier: AF:44:FC:1D:DC:30:75:E7:6F:66:F2:07:5B:79:14:02:19:4F:26:FA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7EA0FE8951AF6BB044740 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/baf2172c-4e81-3994-94ea-5cbfe380b1ce.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ea:0f:e8:95:1a:f6:bb:04:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=f8f564e3-95fe-49f0-9619-44218c3d8689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:7c:11:c8:ca:17:f2:bd:92:31:06:62:ad: c4:bb:01:cc:18:7e:ac:25:0b:ec:cc:2c:69:00:61: d3:bd:12:9d:6d:5e:7c:a8:b1:1d:a2:19:30:e9:88: ff:41:17:36:23:e3:18:0e:55:61:37:9c:18:d7:75: 2e:5d:da:51:7a:64:71:d6:1e:66:57:9f:a1:1e:c7: d0:01:44:2f:b3:3b:7e:c3:56:22:f2:f9:88:3e:48: fd:f4:5e:1f:14:a3:76:40:8a:5b:e8:80:23:3c:7f: 7a:e1:5b:59:c4:4e:f6:9c:98:aa:bc:b8:2c:cd:ec: 6b:17:da:a3:7a:9f:64:11:9e:2b:06:a7:99:9c:08: f3:78:0a:23:08:b5:9a:f2:9c:5f:08:9f:3e:19:7c: b1:01:51:62:db:db:f1:3e:e2:a1:cf:f5:30:5b:c1: ef:39:3f:bd:cd:8c:b5:f5:ea:a3:04:84:e2:62:74: bd:a5:ee:1b:2d:03:27:ae:31:22:ed:68:88:1b:89: ff:80:65:b9:2a:74:8d:19:69:e8:d8:5b:28:16:cc: 7d:7f:80:66:78:95:63:9f:02:13:74:d9:3c:15:ed: 3b:27:96:c1:fc:30:d0:61:c4:b3:81:7e:d4:a5:18: da:3a:af:46:14:19:99:54:ae:0d:f3:d8:57:55:79: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:44:FC:1D:DC:30:75:E7:6F:66:F2:07:5B:79:14:02:19:4F:26:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/baf2172c-4e81-3994-94ea-5cbfe380b1ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:af:15:1e:c6:7f:75:7b:74:e1:c8:b8:bc:51:e7:82:92:38: 13:45:1e:03:53:31:00:04:5f:a2:f9:ad:5a:5a:87:b6:91:57: 08:14:5d:6a:0e:f8:c2:90:b0:b1:14:9e:bd:d8:09:4b:70:ee: 32:44:23:38:b4:0c:93:72:1d:3a:67:c9:fe:04:87:52:b4:b3: 0c:a0:64:1c:0b:a0:1c:c9:91:18:8c:6b:22:0b:3a:b5:d7:39: 7f:3d:7d:11:59:f5:96:7e:1b:bb:e1:58:5d:43:d8:c5:11:55: ae:3e:1f:49:17:fb:85:23:d3:11:d0:8c:a2:6c:57:dd:d6:75: a6:4f:67:a0:b8:ed:bd:9d:c9:74:60:89:d8:a6:2e:60:0d:f3: 68:f0:bf:26:14:d3:2f:bd:0e:00:13:e2:08:a5:eb:be:18:ec: 4b:e1:9c:72:0f:d7:9e:f7:58:34:87:b7:4f:44:11:5d:3e:4f: f4:09:7c:66:f1:ef:5d:c0:59:86:33:90:f0:56:fd:67:15:0d: f9:4a:e0:52:c3:20:69:94:93:9e:df:f2:b4:e9:d7:ef:f6:b5: 3e:de:db:cf:96:86:11:d2:14:08:5b:d9:ef:fb:18:3e:c2:ad: 92:67:c6:b6:fa:60:56:fb:78:fc:5a:8a:a2:81:5c:b3:b1:1a: 37:8d:5f:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+oP6JUa9rsER0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZjhmNTY0ZTMtOTVmZS00OWYwLTk2MTktNDQyMThjM2Q4Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+p8EcjKF/K9kjEGYq3EuwHMGH6sJQvszCxp AGHTvRKdbV58qLEdohkw6Yj/QRc2I+MYDlVhN5wY13UuXdpRemRx1h5mV5+hHsfQ AUQvszt+w1Yi8vmIPkj99F4fFKN2QIpb6IAjPH964VtZxE72nJiqvLgszexrF9qj ep9kEZ4rBqeZnAjzeAojCLWa8pxfCJ8+GXyxAVFi29vxPuKhz/UwW8HvOT+9zYy1 9eqjBITiYnS9pe4bLQMnrjEi7WiIG4n/gGW5KnSNGWno2FsoFsx9f4BmeJVjnwIT dNk8Fe07J5bB/DDQYcSzgX7UpRjaOq9GFBmZVK4N89hXVXm2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9E/B3cMHXnb2byB1t5FAIZTyb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmFmMjE3MmMtNGU4MS0z OTk0LTk0ZWEtNWNiZmUzODBiMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHavFR7Gf3V7dOHIuLxR54KSOBNFHgNTMQAEX6L5rVpah7aRVwgUXWoO +MKQsLEUnr3YCUtw7jJEIzi0DJNyHTpnyf4Eh1K0swygZBwLoBzJkRiMayILOrXX OX89fRFZ9ZZ+G7vhWF1D2MURVa4+H0kX+4Uj0xHQjKJsV93WdaZPZ6C47b2dyXRg idimLmAN82jwvyYU0y+9DgAT4gil674Y7EvhnHIP1573WDSHt09EEV0+T/QJfGbx 713AWYYzkPBW/WcVDflK4FLDIGmUk57f8rTp1+/2tT7e28+WhhHSFAhb2e/7GD7C rZJnxrb6YFb7ePxaiqKBXLOxGjeNX/4= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:41 2026 by rpki-client